TF-MAL-js.s1ngularity |
Malware family: s1ngularity Stealer |
|
s1ngularity Stealer |
1 |
10 |
|
|
|
TF-MAL-osx.yort |
Malware family: Yort |
|
Yort |
1 |
10 |
|
|
|
ET-3331 |
Ruleset Update Summary - 2026/05/18 - v11195 |
|
forum-post |
1 |
10 |
|
|
|
TF-MAL-js.parrot_tds |
Malware family: Parrot TDS |
|
Parrot TDS |
1 |
10 |
|
|
|
TF-MAL-osx.keysteal |
Malware family: KeySteal |
|
KeySteal |
1 |
10 |
|
|
|
TF-MAL-apk.cerberus |
Malware family: Cerberus |
|
Cerberus |
1 |
10 |
|
|
|
TF-MAL-apk.xbot |
Malware family: Xbot |
|
Xbot |
1 |
10 |
|
|
|
TF-MAL-elf.linodas |
Malware family: Linodas |
|
Linodas |
1 |
10 |
|
|
|
TF-MAL-elf.mikey |
Malware family: MiKey |
|
MiKey |
1 |
10 |
|
|
|
TF-MAL-elf.chaos |
Malware family: Chaos |
|
Chaos |
1 |
10 |
|
|
|
TF-MAL-elf.hadooken |
Malware family: Hadooken |
|
Hadooken |
1 |
10 |
|
|
|
TF-MAL-elf.little_daemon |
Malware family: LittleDaemon |
|
LittleDaemon |
1 |
10 |
|
|
|
TF-MAL-js.dnsrat |
Malware family: DNSRat |
|
DNSRat |
1 |
10 |
|
|
|
MB-c5cab4e8643d9494801477fa620c929835fa256f6b2806847f2a9e50e31da3c5 |
ConnectWise: ScreenConnect.ClientSetup.exe |
high |
ConnectWise |
1 |
10 |
|
|
|
TF-MAL-ps1.silent_prism |
Malware family: SilentPrism |
|
SilentPrism |
1 |
10 |
|
|
|
MB-1a75f1063efdfaf08206ea57b219b8cf62418784010381eda4de21bd10dc0335 |
Mirai: x86 |
high |
Mirai |
1 |
10 |
|
|
|
TF-MAL-osx.watchcat |
Malware family: WatchCat |
|
WatchCat |
1 |
10 |
|
|
|
TF-MAL-elf.ktlv_door |
Malware family: KTLVdoor |
|
KTLVdoor |
1 |
10 |
|
|
|
TF-MAL-elf.cr1ptt0r |
Malware family: Cr1ptT0r |
|
Cr1ptT0r |
1 |
10 |
|
|
|
TF-MAL-elf.bibi_linux |
Malware family: BiBi-Linux |
|
BiBi-Linux |
1 |
10 |
|
|
|
TF-MAL-js.mega_medusa |
Malware family: megaMedusa |
|
megaMedusa |
1 |
10 |
|
|
|
MB-094fd325049b8a9cf6d3e5ef2a6d4cc6a567d7d49c35f8bb8dd9e3c6acf3d78d |
AgentTesla: COPY-SCANB840284-IMG-2020-13-02-DOCUMENT-PDF.exe |
high |
AgentTesla |
2 |
10 |
|
|
|
CVE-2026-7995 |
CVE-2026-7995 |
high |
cve |
0 |
10 |
|
|
|
CVE-2026-30495 |
CVE-2026-30495 |
high |
cve |
0 |
10 |
|
|
|
TF-1811903 |
KongTuke: Domain name that delivers a malware payload 1eh2e3taw3g.com |
high |
KongTuke |
3 |
10 |
|
|
|
MB-cb90f55f8558abb13b7480d61fb30341df3f068250d7e13d8bfbc6419a36a4a6 |
AsyncRAT: cb90f55f8558abb13b7480d61fb30341df3f068250d7e13d8bfbc6419a36a4a6 |
high |
AsyncRAT |
1 |
10 |
|
|
|
MB-8f6502f9cc4e6916a6481bf77b2e52473143f39a6fb258186edbb146e577fa65 |
AsyncRAT: I9BETAPP.exe |
high |
AsyncRAT |
1 |
10 |
|
|
|
MB-225e7d743bf14377c227a86d580e579f66d5d3fce26787c3a1a5677f27698d96 |
AsyncRAT: New Order PO023012026.bat |
high |
AsyncRAT |
1 |
10 |
|
|
|
MB-7aec4effc2510ab05eb930205f91c33d46a6272d1c305660cc593467c5e6f208 |
AsyncRAT: PYTHON.exe |
high |
AsyncRAT |
1 |
10 |
|
|
|
MB-103bf7cda93749567f7e16e48cd205fd059fdda7f7396a781c6e4a096a3b47d7 |
AsyncRAT: Telegram (1).exe |
high |
AsyncRAT |
1 |
10 |
|
|
|
MB-7197e5ea11a57115e7181b14b5fd3a07d5ba9ec2e1a66d02b5fed9a13a53dbb7 |
Mirai: arm5 |
high |
Mirai |
1 |
10 |
|
|
|
MB-9ec0777164bfb8981553f9beec161e092b05ffea560ef90d0d5333797eade5c2 |
AsyncRAT: nexusflow.exe |
high |
AsyncRAT |
1 |
10 |
|
|
|
MB-c2e330e711d400384da68f36f1c80c8d70c8a214922ed6d1f2c3b606adab7df4 |
Mirai: arm6 |
high |
Mirai |
1 |
8 |
|
|
|
MB-42364d1b17f20b54806f6de76aa89df1f9ebb7587a1cb1bd9ea75983fac0c4fd |
AsyncRAT: AU88APP.exe |
high |
AsyncRAT |
1 |
10 |
|
|
|
CVE-2022-26522 |
CVE-2022-26522 |
high |
cve |
0 |
10 |
|
|
|
MB-44b341bf38fdd117213071e71574e97058afd67112f8f7ad1d08478085cbfd15 |
Mirai: pppc |
high |
Mirai |
1 |
10 |
|
|
|
MB-ed24821c2eb412dd4c58786990877e25545c4516fbc8f43f23add40fbbb7f5f8 |
Mirai: pmpsl |
high |
Mirai |
1 |
10 |
|
|
|
MB-f5f0e52163104f81b6897b23284e625d9ddcab36751c1552b64a73004f824cf2 |
QuasarRAT: v5fueei.exe |
high |
QuasarRAT |
1 |
10 |
|
|
|
MB-6eff2e306ad53860ccc4cb4fd5b12d766de2ec6c31e5625934c6c182be688ed4 |
AsyncRAT: AU88.exe |
high |
AsyncRAT |
1 |
10 |
|
|
|
MB-e7f0b76e70282a3b03e38955d3559660c55f757320930aaf3c413b0951941bcb |
Unknown: zlalala.exe |
high |
Unknown |
1 |
10 |
|
|
|
MB-fbde93278c6b68302a0b0980d4e89cda1b8fd56efbfc0a15fa4c29903b4fbda6 |
Mirai: bot.sh4 |
high |
Mirai |
1 |
8 |
|
|
|
MB-b3951980b0017d9e90b9b709a7a6af848adf7f273581bdfeb5110a8cfe5f2ee1 |
AsyncRAT: Python Install Manager Installer.exe |
high |
AsyncRAT |
1 |
8 |
|
|
|
MB-94a0fd7835576e648601a4f7238d78c8883097468b889244cef9f9bf6f6eaeba |
AsyncRAT: Telegram Portable.exe |
high |
AsyncRAT |
1 |
10 |
|
|
|
MB-270887cd3939ea9eb91d47ce5eeedd4141cb112501d42844020e496c76384608 |
AsyncRAT: WinRar.exe |
high |
AsyncRAT |
1 |
9 |
|
|
|
TF-1811898 |
ClearFake: Domain name that delivers a malware payload l7jn1e9j.unseen-zorenka.digital |
high |
ClearFake |
2 |
10 |
|
|
|
CVE-2026-42476 |
CVE-2026-42476 |
high |
cve |
0 |
10 |
|
|
|
CVE-2026-7911 |
CVE-2026-7911 |
high |
cve |
0 |
10 |
|
|
|
MB-b6badd77d0d32c295b8b9f66afef0437e4a6fdc9db5d8dff50a858b068f1d025 |
AsyncRAT: Chrome.exe |
high |
AsyncRAT |
1 |
10 |
|
|
|
MB-f07e85c6e9a94e0502a927410135314b878c395a273e49ab414868149f71d04d |
AsyncRAT: Discord (1).exe |
high |
AsyncRAT |
1 |
8 |
|
|
|
MB-20da7c750b4c1162896320d3381121eb4bf71a19eee85234e9425d78c92c865c |
AsyncRAT: kop.exe |
high |
AsyncRAT |
1 |
10 |
|
|
|